Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2024, 06:55

General

  • Target

    cd670d26278130392dca9900afade96b.exe

  • Size

    4.5MB

  • MD5

    cd670d26278130392dca9900afade96b

  • SHA1

    39a1762a32ad39f508117f8e3189d1c4302eaa1b

  • SHA256

    0f81708891d4027ce110f93abece2e5a65239598ab5a551a5f027ab150979209

  • SHA512

    3639eeef0da80ddf4b383c2c31941a09e320b544cdb9d47196b6194d4a70ee6ead7e5164b83afe525590411636a680ea1be9d2de98c915888a5a13226cdec2a4

  • SSDEEP

    49152:9dRba8fD8qinfMSKJXIUQREV1QOTu1U5ai2czYo5UC9RhuCTFKlaxV5dgbT7v1iv:K/IJsiCcsop7cTwdzt

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cd670d26278130392dca9900afade96b.exe
    "C:\Users\Admin\AppData\Local\Temp\cd670d26278130392dca9900afade96b.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of SetWindowsHookEx
    PID:3368

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3368-0-0x00007FF74A570000-0x00007FF74AA40000-memory.dmp

    Filesize

    4.8MB

  • memory/3368-2-0x00007FF74A570000-0x00007FF74AA40000-memory.dmp

    Filesize

    4.8MB